CVE Database›Document archive›CVE-2025-38656

CVE-2025-38656

kernel: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · August 22, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.

Statement

Red Hat Enterprise Linux is not affected by this vulnerability because the flawed upstream commit is not present in supported Red Hat kernels. The issue is limited to environments running specific upstream stable kernels equipped with legacy Intel wireless hardware operating in DVM mode. Under affected configurations, failure during deferred work initialization could trigger improper pointer handling and lead to a kernel memory corruption flaw, but standard Red Hat deployments remain unaffected.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-416 · Use After Free